CVE-2025-4957

creationtimestamp| type| source ---|---|--- 2025-10-09 13:29:39+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m2rb7iqq7r2o...

CVE-2025-4957

The CVE-2025-4957 entry concerns the WordPress ProfileGrid plugin (versions up to and including 5.9.5.7). The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Exploitation could allow injected scripts to run in a use...